Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/coCW6KzXbpqhfz62eAQG49pWPtI.cer
File:                     coCW6KzXbpqhfz62eAQG49pWPtI.cer (raw, json)
Hash identifier:          keRATxTKbnucDGnt0z4SbrUfaiRGNRasmCPez8q3o/o=
Subject key identifier:   72:80:96:E8:AC:D7:6E:9A:A1:7F:3E:B6:78:04:06:E3:DA:56:3E:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D71B03A4B554E4151FE7FE32AA18DF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 202313

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:1b:03:a4:b5:54:e4:15:1f:e7:fe:32:aa:18:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=728096e8acd76e9aa17f3eb6780406e3da563ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:89:54:1f:ce:62:a8:2a:79:be:be:05:30:fb:
                    cd:f4:f6:7c:eb:22:fe:a7:d0:f5:d5:bf:65:1b:8e:
                    23:86:e5:25:c0:61:b8:11:36:a8:a6:d7:e4:c3:8e:
                    8e:2b:6b:d5:bc:60:d2:7d:5d:2b:d1:91:bd:d7:3b:
                    36:fd:8d:55:90:a0:92:da:02:d6:f1:8b:a7:82:c2:
                    1a:2e:4a:f7:07:74:0e:e0:e6:83:81:cd:c8:3a:b4:
                    22:a5:ac:33:39:45:88:2e:fe:cc:84:74:80:cf:41:
                    28:a5:ea:f6:a3:e0:99:b9:e3:72:87:6e:1c:4b:dc:
                    8a:27:94:05:10:30:bf:7c:67:c2:d5:5d:30:0c:5c:
                    c9:03:42:24:0c:58:04:82:8f:a5:16:a8:40:5f:9b:
                    6a:c0:98:fe:72:32:05:27:22:3b:a6:be:37:ff:8f:
                    0d:fb:ca:4f:25:50:00:34:85:4f:67:df:14:32:fc:
                    e3:7d:52:2c:96:8b:cd:be:9e:f7:6e:d1:76:75:0a:
                    2e:f3:69:15:44:24:12:aa:4b:28:15:d1:1c:4d:02:
                    46:3f:66:52:87:48:6d:c5:e8:e0:e3:28:0f:a5:74:
                    61:37:26:2b:2a:dc:ec:35:15:fc:76:75:fd:75:64:
                    bd:9b:66:29:63:1e:cd:18:f3:03:ec:ff:5e:dd:71:
                    86:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:80:96:E8:AC:D7:6E:9A:A1:7F:3E:B6:78:04:06:E3:DA:56:3E:D2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202313

    Signature Algorithm: sha256WithRSAEncryption
         90:00:a0:0d:23:c1:cf:3c:58:d3:b1:e8:63:83:c8:0b:ce:1b:
         6c:17:66:4f:4d:2b:42:27:c1:b1:ca:64:f2:8f:b3:da:19:86:
         23:5b:c0:1e:0f:f0:53:19:86:7b:0d:49:87:ec:a9:31:6a:f0:
         ff:6b:cd:92:24:d1:0e:da:3e:e3:d3:10:da:64:20:5f:30:a8:
         e8:ef:3f:9d:09:1f:76:4a:94:9b:d4:79:ea:a1:93:12:fb:25:
         11:1f:bb:a8:8e:43:e2:fc:09:e5:23:f7:ac:b3:eb:e2:3f:b0:
         5b:56:fa:8d:23:76:be:d3:b6:27:5b:94:6f:4f:fb:cc:d0:c4:
         f8:9d:c6:9d:c7:9b:e3:4b:ee:41:8b:e7:c1:82:8e:b4:c7:5d:
         f2:63:45:0d:c4:d7:e3:fb:c4:7b:5e:bd:53:83:2c:d0:81:e2:
         71:2a:c9:26:cf:68:97:75:3e:6f:fc:94:b2:e4:2b:03:7c:e1:
         e9:26:e7:ac:a4:29:6a:4a:d9:b9:c5:b5:2a:45:a3:4d:c0:f7:
         35:60:8d:b8:c9:a9:8a:52:59:d1:d1:24:b0:94:dd:21:e0:1d:
         3b:dc:25:2b:ef:7e:ab:c3:bc:d7:b5:ee:68:c4:1c:55:73:f1:
         59:79:cb:a7:1c:ee:82:c7:59:c0:3e:06:a1:03:ce:14:93:a6:
         59:cf:04:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----